$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: AEiulLe7JB+nTM4ETFQJwv69nTYaa0aMb88rpbF79kw= Subject key identifier: AE:79:0D:5D:5F:F5:F0:D9:A2:BC:82:6B:33:D5:DC:15:1A:A9:31:2F Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 501E5E3C99D78248686AAA3B120F7B20F48A1995 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 0330 Signing time: Wed 25 Mar 2026 13:52:37 +0000 Manifest this update: Wed 25 Mar 2026 13:47:37 +0000 Manifest next update: Sat 28 Mar 2026 14:27:37 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: 8MXCVVmgFJwDWCMYmHyMxOEi5xMm9+NeNpqyM9zXG4E=) 2: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: 1P+PQQB102TZART/oZnwB0CXGgNgBobig9IZy6mAuUM=) 3: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: XcReqzCko69+a8GUZBIxgx2X6G3V6UQGka2FfNCmX/c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1e:5e:3c:99:d7:82:48:68:6a:aa:3b:12:0f:7b:20:f4:8a:19:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Mar 25 13:47:37 2026 GMT Not After : Mar 28 14:27:37 2026 GMT Subject: CN=AE790D5D5FF5F0D9A2BC826B33D5DC151AA9312F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:67:6c:6f:53:85:e7:3d:e3:6f:e2:e8:74: 4b:22:f2:1b:38:e9:82:78:e1:44:c7:4e:82:ca:6f: ab:2c:9b:5f:a9:8b:4c:80:50:97:0f:bd:d0:27:33: bb:0c:22:fa:53:87:2d:91:7d:74:cc:dd:fc:f7:5d: cd:c7:e4:99:67:3c:1e:36:6a:5a:72:20:64:09:b2: 83:80:6e:b4:85:d2:e2:4d:73:40:19:29:84:1d:48: c1:88:2c:73:42:09:4f:63:7b:a2:b4:e2:f3:ac:b4: 69:aa:e7:fe:c2:34:a1:b0:32:b0:70:3d:3b:de:8f: a3:ea:df:bf:af:0a:c4:1d:58:45:76:c0:a6:ca:4d: ed:29:9d:0d:dd:6d:0d:36:48:11:47:b2:0d:9a:91: 3b:6b:b6:37:20:81:f8:c0:a6:66:4a:3a:4b:ac:93: 28:ae:8d:55:2c:fa:df:32:25:1a:5c:50:0f:53:ec: 6c:04:09:1f:40:6b:43:42:b4:04:f2:31:6d:e4:db: a6:b8:f7:a2:cd:28:1b:d5:a9:d8:72:57:50:a7:ae: d0:3d:95:25:bc:20:b6:30:16:e0:1d:96:28:76:98: 7d:b8:a4:de:76:b3:64:01:f7:f6:62:75:76:bd:a5: 87:38:0c:15:a0:10:7a:d3:60:95:f5:26:34:52:10: 80:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:0D:5D:5F:F5:F0:D9:A2:BC:82:6B:33:D5:DC:15:1A:A9:31:2F X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:60:74:03:e9:ee:ac:57:65:b4:0a:cb:86:d4:42:4c:1f:89: f0:28:ef:bf:2f:84:01:26:c4:d2:71:18:7b:4d:3b:95:18:f0: e0:02:49:89:d9:f9:c1:36:3f:00:5f:88:86:dc:fe:5d:75:55: e3:3d:3f:27:e5:09:a2:ca:eb:7f:61:ee:b6:28:27:0d:9c:d9: 60:9a:24:00:6e:b1:72:6a:18:22:21:1e:6a:fe:a8:b3:db:b6: e8:7c:b3:a9:a0:47:0d:e1:ec:59:f7:e1:70:da:4b:7c:14:5c: 21:3c:ff:4c:52:19:f1:70:2c:43:19:75:59:08:51:6b:23:bc: 7e:29:c3:33:77:40:50:17:bf:9f:7c:a0:fc:00:e6:a2:4a:bb: b7:77:03:fe:47:5f:7b:ac:e9:08:0b:f8:2e:e5:eb:ef:1f:7a: 5d:fa:41:79:3a:d3:ee:dd:fc:7f:70:07:c1:8e:b0:03:79:61: 7a:22:a0:53:b1:7d:aa:b8:a1:f3:b4:1e:92:2d:60:d3:7a:ba: b7:5f:e8:b9:98:9c:09:d6:b3:a9:73:64:e7:de:3f:12:8b:c7: fc:7a:74:6d:ca:38:80:3b:eb:ee:13:af:1a:7b:94:27:68:a9: be:fc:d2:08:5e:8c:8b:cd:90:c9:17:bd:5c:6b:24:1a:85:d3: d0:f3:9f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUB5ePJnXgkhoaqo7Eg97IPSKGZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNjAzMjUxMzQ3MzdaFw0yNjAzMjgxNDI3MzdaMDMxMTAvBgNV BAMTKEFFNzkwRDVENUZGNUYwRDlBMkJDODI2QjMzRDVEQzE1MUFBOTMxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwOmdsb1OF5z3jb+LodEsi8hs4 6YJ44UTHToLKb6ssm1+pi0yAUJcPvdAnM7sMIvpThy2RfXTM3fz3Xc3H5JlnPB42 alpyIGQJsoOAbrSF0uJNc0AZKYQdSMGILHNCCU9je6K04vOstGmq5/7CNKGwMrBw PTvej6Pq37+vCsQdWEV2wKbKTe0pnQ3dbQ02SBFHsg2akTtrtjcggfjApmZKOkus kyiujVUs+t8yJRpcUA9T7GwECR9Aa0NCtATyMW3k26a496LNKBvVqdhyV1CnrtA9 lSW8ILYwFuAdlih2mH24pN52s2QB9/ZidXa9pYc4DBWgEHrTYJX1JjRSEICtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrnkNXV/18NmivIJrM9XcFRqpMS8wHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9gdAPp7qxXZbQKy4bUQkwfifAo778vhAEm xNJxGHtNO5UY8OACSYnZ+cE2PwBfiIbc/l11VeM9PyflCaLK639h7rYoJw2c2WCa JABusXJqGCIhHmr+qLPbtuh8s6mgRw3h7Fn34XDaS3wUXCE8/0xSGfFwLEMZdVkI UWsjvH4pwzN3QFAXv598oPwA5qJKu7d3A/5HX3us6QgL+C7l6+8fel36QXk60+7d /H9wB8GOsAN5YXoioFOxfaq4ofO0HpItYNN6urdf6LmYnAnWs6lzZOfePxKLx/x6 dG3KOIA76+4Trxp7lCdoqb780ghejIvNkMkXvVxrJBqF09Dzn/U= -----END CERTIFICATE-----Generated at Fri Mar 27 01:59:27 2026 by rpki-client